Gerhard Scheikl 3a77bed716 fix security issues

2026-05-09 22:19:25 +02:00

..

_index

security: restrict installs to ALLOWED_SHOP and remove generic landing form

2026-05-09 18:01:14 +02:00

auth.login

security: restrict installs to ALLOWED_SHOP and remove generic landing form

2026-05-09 18:01:14 +02:00

api.flow.generate-invoice.tsx

first version

2026-04-28 21:56:11 +02:00

api.flow.send-invoice-email.tsx

first version

2026-04-28 21:56:11 +02:00

api.orders.$orderId.invoice.tsx

feat(offers): generate Angebot/Offer PDFs for draft orders

2026-05-09 19:26:33 +02:00

api.public.girocode[.png].tsx

fix(thank-you): serve GiroCode as signed PNG URL instead of data URL

2026-05-09 21:14:47 +02:00

api.public.payment-info.tsx

fix security issues

2026-05-09 22:19:25 +02:00

app._index.tsx

fix(ui): align section headings (drop padding=none + redundant inner s-box)

2026-05-08 22:47:10 +02:00

app.invoices.tsx

fix(offers): add read_draft_orders scope so draftOrders query works

2026-05-09 19:41:12 +02:00

app.settings.tsx

fix security issues

2026-05-09 22:19:25 +02:00

app.tsx

first version

2026-04-28 21:56:11 +02:00

auth.$.tsx

initial version (template only)

2026-04-28 13:34:35 +02:00

healthz.tsx

fix(health): add /healthz route and tighten docker healthcheck

2026-05-08 22:42:09 +02:00

webhooks.app.scopes_update.tsx

initial version (template only)

2026-04-28 13:34:35 +02:00

webhooks.app.uninstalled.tsx

initial version (template only)

2026-04-28 13:34:35 +02:00

webhooks.orders.create.tsx

refactor(automations): detect manual payment via OrderTransaction.manualPaymentGateway

2026-05-09 20:31:31 +02:00

webhooks.orders.fulfilled.tsx

refactor(automations): detect manual payment via OrderTransaction.manualPaymentGateway

2026-05-09 20:31:31 +02:00

webhooks.orders.updated.tsx

first version

2026-04-28 21:56:11 +02:00